skysight-inc/HackerNews huggingface dataset:
Not a nonsense if you take into account that one kidney is more than enough for our bodies. So two are not under a heavy stress as you say. Even if you would readd the filtered waste (which is also not solid waste, but rather small amounts diluted in water), there's still plenty of "capacity".

Furosemide is diuretic. Among others. I don't say you should drink urine, but consider:

- its water+x. When you have kidney stones, you have to drink more. Check.

- its water+x. If you have more of x in your body, it doesn't necessarily mean the kidneys start to produce more concentrated urine, like a heart beats faster, if more oxygen is needed. But, a part of the x is bicarbonate and urea. If you take in more than necessary of bicarbonate, you'll become alcalosic and your kidneys react to that by watering it out fast. Urea is also diuretic by default. So drinking urine would add more of bicarbonate and urea back and in the end provoke going often to toilet. That's exactly what one need xD check.

Just think of the thousands of years and a lot of people of different cultures utilizing urine as medicine or for health benefits :)
Those are usually called STOs for people who make the final call, not DRIs, from what I saw in my tenure there. The Amazon doc is a great concept when there are single threaded owners, however Amazon also has had culture and growth issues where “alignment” (like Google) became more important as team and orgs grew with multiple doc “owners” in direct contradiction of what Bezos used to preach so it just becomes design by committee for new features and products. Org dependent of course but I think that was the Day 2 culture seeping in as Bezos moved on and the company grew.
> I was excited to try it (and even pay for it!) until the requirement to sign up

How much would you be willing to pay? I feel like if you say that, and you like a product on HN, it's helpful to provide feedback (although it's not show hn, so idk if they'll see it). One time payment of $100? $5/month subscription? 10/month?

If social-sign-in is too much of a barrier (it was two clicks for me, and my email is pretty public, and I can switch to another account within the browser), then I'd be very surprised that you'd be willing to pull out your credit card and deal with the hassle of a purchase or subscription.

Also, saying that you'd be willing to pay for the product is meaningless if it's much less than the effort to often build and maintain for the business.

Maybe I am wrong, and you're willing to pay 1000s if only for those few small issues, but sometimes small hurdles like sign-ins are a good way to filter out customers that should be turned away because they're not as invested in the product. I would even argue that an app that requires no sign-in comes off as non-serious because any non-trivial app requires sign-in; the ones that don't are often very simple and the type of thing most people wouldn't pay for.
What email was suspicious? From what I can read. Proton provided the Spanish authorities with a recovery email address, which the latter then used to find an associated Apple account.

While I agree this makes Proton unreliable for many things, there's no indication they were reading any emails.
He didn't actually write it.
Pythoner Native Lisp
Yes the design by committee will continue until morale improves.
What leaks your location might just be a DNS request. Depends on the configuration.

The site can include a completely unique DNS name as a part of a page. Something like "a5afbdeffe.attacker.com".
How does that compare to 1997 "Lolita" with Jeremy Irons?
Maybe there are no more tasks to be done. But layoffs aren't liked by either those being laid off, or by managers with shrinking headcounts.
Basically the law assumes that a vehicle that's heavy enough MUST be something people use for business purposes - nobody would daily drive a 6000 pound vehicle every day. And those cars get special treatment tax-wise and relaxed emission standards. They are for work after all.

Car manufacturers had a lightbulb moment and started making regular cars FUCKING HUGE, thus slipping into the magical weight bracket.
Hanami.rb Articles
Hey

I've recently started doing some stuff with hanami, and as a way to learn and summarize my new knowledge and experience, I am writing down some stuff that I did.
This links one article, and you can find one more, about Warden on Hanami, with more to come.
There are techniques for arbitrary precision math (lookup BigNum), I assume they're used there for some of the things
More than single digit, but I don't get how this is relevant to the question at hand?

This seems to be about manager-to-manager-interactions, not about manager-to-employer interactions or organizational issues stemming from a particular number of subordinates.

Sure if you are the only person at your department you might be in a different position, as described in the article — but I stand by the statement that calculated optimism is a superior stance to stoic pessimism — again, regardless of the number of subordinates.

Now you could convince me that there are certain particularly cut-throath-on-th-sinking-ship-institutions out there where all you're doing is constant damage control and calculated optimism under these circumstances would be aomething you could neither afford, nor would it change anything. Granted. But I wouldn't choose to work there and if I worked there I wouldn't choose to stay there.
Looks like there are still some bugs open[0] and some unimplemented details[1]. Self promo of my arewemodulesyet to see the status of modules support in the c++ library ecosystem [2].

[0] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103524

[1] https://gcc.gnu.org/projects/cxx-status.html#cxx20

[2] https://arewemodulesyet.org/
Would not have happened in C# which uses distinct Random (and Random.Shared) as PRNG and RandomNumberGenerator[0] as CSPRNG even when mixing namespaces.

Also has corresponding analyzer rule if you want to enforce this project-wide[1].

[0] https://learn.microsoft.com/en-us/dotnet/api/system.security...

[1] https://learn.microsoft.com/en-us/dotnet/fundamentals/code-a...
We don't have many internships planned right now but do welcome open applicants.
Multiple desktop shell sessions per user. Oh yeah, that would rock
Broken scroll on android/firefox.

Complex things are only for apple kids :(
Post says "Remote EU" but job says "Netherlands". Are you only considering people based in The Netherlands or all of EU? Thanks!
Bubble Memory
" -Wanalyzer-infinite-loop warns about paths through the code which appear to lead to an infinite loop."

That's nice, but what we actually wanted was a -Wanalyzer-not-halting .
Your take is just about the opposite of what anybody I know would mean by privacy, which is to protect your information from government actors primarily, for obvious reasons since the government is an actor that seeks out to harm the public.
The Ivy League schools don't necessarily have the best teachers. Professors are hired mainly based on their research output, not on teaching skills.

However, if you go to an Ivy League school, you'll be surrounded by the best students, which makes a difference, and you will get other perks, like tutoring from graduate students (the university gives them housing in exchange). If you're in science, you'll also be able to do undergrad research in a top lab.

Branding is a big deal, but these universities are legitimately great places to study.
>You’re using Hillary as your example for why Biden won’t be elected, when Biden has already been elected and is sitting in the White House right now.

That's true, but the situation has changed. After 4 years of Trump and almost a year of him bungling the Covid response and George Floyd protests, lots of voters wanted a change, and people who had previously sat out the 2016 election or voted Other showed up this time to vote for Biden, who seemed like a boring but competent candidate. (Don't forget, however, Trump got more popular votes in 2020 than he did in 2016; it was simply outweighed by the even greater increase on the Dem side.)

Now, it's 4 years later; Covid is over, but the economy is suffering from high inflation (which is fine for rich people but hurting the lower/middle classes), the housing situation is worse than ever, and now the progressives/GenZ are royally pissed about Biden's handling of the Gaza situation.

Historically, one thing that's been pretty constant with US Pres elections is that people vote for change when they're mad about the economy (and of course blame it on the current Pres).

>But elections aren’t about who you like anymore, they’re about who you dislike and what that person you dislike is going to do.

This has pretty much always been the case. But as the Dems have failed to learn over and over, you still need to nominate someone that has some degree of charisma and doesn't have a lot of baggage. (And it's unfair too: the Republican candidates don't seem to have such a high bar to meet here, but it is what it is.)

I could be wrong of course, but I can easily see enough voters staying home to allow Trump to win.
> What economic definitions are political?

Pretty much every single one of them actually. And that should be no surprise, no academic field is free from its social background, and economics being the heir of what used to be political philosophy, there's really no surprise that it's affected a lot by it.

You want concrete example: “GDP” it used to count only legal economy, now in most OECD countries it also counts stuff like drug dealing and other clandestine activities, but it does not count lots on activities, like community work or even housework. How is the limit drawn? It's entirely arbitrary is actually open to political debate.

The fact that we use GDP as an indicator at all, is also political: we could use Net Domestic Product, which takes depreciation of capital into account (that would be useful when it comes to ageing infrastructures), or even use other tools.

“Unemployement” it is not, in fact, the number of people that aren't working, it's the number of people who are actively looking for a job. And as such, during the 2010-2020 era, the US had low unemployment, despite having less working people than comparable countries, because many people weren't actually included in statistics (“Disguised Unemployment”). Students are considered “inactive” by the way.

In fact, you can take the entire economic lexicon and do the same exercise: all the definition here are arbitrary and the way they have been defined is subject to political debate. And for sociological reason in the field, most of them has been defined from a conservative mindset. Likewise, sociology has been mostly shaped by leftist views, and the definitions are a reflection of that. That doesn't mean economy or sociology are useless, but ignoring this bias is very problematic.

> There's a reason phd econ programs recruit math majors, not econ majors. It takes some high level math aptitude and tooling these days.

The reason why they do so is that Math is not science, so they go well around each other.

Don't get me wrong, I've a Math degree and I love it, but it's not science: assuming your reasoning is logically correct, then it's true, you don't have to confront it to the real world to see if it matches and if it's actually descriptive of real phenomenon. And that's the problem of mathematical economy: people do reasoning in a vacuum, it is “true” is the mathematical sense of things, but its descriptive power is close to zero.

In that regard, my favorite mathematical economics paper that I've read this year is one[1] that mathematically proves that “agents are infinitely-lived” is a poor hypothesis (among others). This isn't about studying the economy at all, it's just proving random theorems and it has no more scientific value than the theorems software developers unknowingly prove every day thanks to Curry–Howard.

Actual economics looks like this[2], but it's actually much more work to get a single paper, and the selective pressure is really going in disfavor of such research, and in favor of cheap intellectual masturbation.

[1] https://sci-hub.se/https://www.sciencedirect.com/science/art...

[2] https://annas-archive.org/scidb/10.1162/003355397555352?scid...
I encountered this with Hero, when the single giant calligraphy character that is critical to the film had a different subtitle in the cinema and on the DVD. One of these days I'd love to read a deep dive into how that aspect of the film is understood by native speakers. Which I suspect might be longer than the film itself, dealing as it does with the politics of Chinese unity.
Tuta.com not here :(
> "Earmark" comes from the livestock term, where the ears of domestic animals were cut in specific ways so that farmers could distinguish their stock from others grazing on public land.

https://en.m.wikipedia.org/wiki/Earmark_(politics)
This situation is interesting, but the article mentions using a VPN for example, and also the recovery email.

What if my recovery email is to another proton mail account?
What if my VPN used is Proton VPN?
Why would you use C, or even assembly, when machine code is faster
Sky News has more information:

https://news.sky.com/story/china-hacked-ministry-of-defence-...
How has that worked out for you? To me, having a boss that screams "Close or you're fired!" is having a shitty job. Having an internal voice that screams "Close or you have no value!" is having a shitty life.
Nice sales trick
China Hacked UK Ministry of Defence, Sky News Learns
Can they really offer a cheaper alternative? Would be a first for Apple.
I don't think it's so clear-cut that the capacity should be decreased in that case, because it not only destroys the theoretical complexity of algorithms using it, but also because in practice there can be cases where an array gets increased to 1000000 elements, then it gets consumed to 0 elements, after which it again is increased to 1000000 elements for the next round of operations. Converting the array to be backed by a smaller allocation is not free.

Indeed, which case is even more common: large arrays getting smaller and then kept that way, or large arrays getting smaller to grow again later?

I suppose some more complicated metric (e.g. keeping track of reallocations per array) could help with the most common cases.
Well Spain probably never got over the Franco legacy.

https://www.wired.com/story/europe-break-encryption-leaked-d...

“Ideally, in our view, it would be desirable to legislatively prevent EU-based service providers from implementing end-to-end encryption,” Spanish representatives said in the document.
About 1/3 of the way down, there’s an explanation of the small tax advantages and the flexibility it gives the company (pausing a buyback program is not reacted to the same way as a dividend cut).

Ctrl-F “flexibility”
Thanks, you think it would be a good saas idea?
Not sure if that is what you mean, but at Microsoft they have the *Bug Cap Formula, which is:

Bug Cap = # engineers * 5

If the bug count exceeds the cap at the end of the sprint, the next sprint is used for bug fixing only.
In general, Nordic countries are known for their extensive privacy laws, which in theory would make it harder for law enforcement to gain access to your traffic (and with a court order it is very easy to decloak your VPN traffic). However, as all Nordic countries are part of the Schengen Area, they are bound by European laws - and their enforcement. When Europol started cracking down on VPN providers that didn't comply, NordVPN (and all others who wanted to remain in the European market) were forced to admit [1] that they do comply with law enforcement orders. Today, all VPNs that you can legally buy are worthless in the aspects they advertise to you. You neither get extra security through encryption when browsing the web (https is already good enough for public wifi) nor actual privacy from your own government. There is exactly one use case for public commercial VPNs these days: If you want to easily access the internet from a different location to bypass geoblocking. But many big services like Netflix have started to simply block or otherwise limit access from traffic that comes from big VPN provider IP ranges, so even that use-case is becoming more worthless every year.

[1] https://www.pcmag.com/news/nordvpn-actually-we-do-comply-wit...
part of why it's so hard is that modern economics grew out of "political economy" by pretending to divorce itself from politics and ideology, which of course it never really did. so you end up studying something whitewashed to pretend it isn't intimately linked with political goals and nothing really makes sense without also figuring out the real questions being asked. like you want to optimize the allocation of resources? great, optimize which resources for who, and how do you define the real cost functions etc? a lot of that stuff gets assumed a priori and you'll probably be going into an economics discussion or study with totally different starting assumptions than the economics math is using and get stuck when the math doesn't make sense
> a lightly modified version of Daniel J. Bernstein’s ChaCha stream cipher. ChaCha is widely used in a 20-round form called ChaCha20, including in TLS and SSH. Jean-Philippe Aumasson’s paper “Too Much Crypto” argues persuasively that the 8-round form ChaCha8 is secure too (and it’s roughly 2.5X faster)

Call me paranoid but my mind immediately jumps to the question of whether this paper can be trusted or if it has been planted by a TLA to intentionally weaken crypto.

I don't know Jean-Philippe, or much about them, but they seem to be both an experienced cryptographer and someone who has founded a company that is close to many government-adjacent organisations (UNHCR, banks, payment services, defence contractors—and that's just from the home page [0]) and therefore could easily have been exposed to persuasive state actors.

Does anyone know more about the security of the 8-round form and whether we should be concerned?

[0] https://www.taurushq.com/
> It seems to be better to err on the side of 'people dont know if they want a PRNG or a CSPRNG' and switch the default to the latter with an explicit choice for the former for people that know what they need :)

That’s exactly what we did in PHP 8.2 [1] with the new object-oriented randomness API: If you as the developer don’t make an explicit choice for the random engine to use, you’ll get the CSPRNG.

Now unfortunately the hard part is convincing folks to migrate to the new API - or even from the global Mt19937 instance using mt_rand() to the CSPRNG using random_int() which is already available since 7.0.

[1] https://www.php.net/releases/8.2/en.php#random_extension
Here in Europe the DECT guard band is often used for this and i think it's not illegal. About the US no idea but they have the 915 band right?
25 line pull request doing what? Supporting this format efficiently is probably more LOC and unlikely to get merged as few need this and it complicates the code. Doing the thing I did in Python inside OpenCV C++ code instead (reinterpreting the data) is not really possible since you have less knowledge about the input data at this point (like, you're going to assume it's an RGBA image and access past the area defined as the allocated array data range for the last A value? The user gives a 3D array and you blithely work on the 4th dimension?)

And what about the other examples I measured, including pure numpy code? More patches to submit?
Look up Osmocom, that project is the software side but their site has a lot of details on hardware too.
Even Mullvad?
fascinating! and playable on the internet archive in-browser
https://archive.org/details/msdos_Bravo_Romeo_Delta_1993
The technical moat for software companies is the effort to implement the logic; for instance, many companies have moats because they implement functionality that is hard to reproduce without having access to documentation needed to implement that functionality. It is also possible that there is so much functionality implemented over the years that copying it, while 'just work' is just too much work for most companies to really compete; SAP is an example.

Then there is the example of OpenAI etc; too costly to reproduce simply by not having enough compute.

Besides technical moats, you have client base moats; for instance, a trivial to implement application, like say, Resend (where you can find tons of open and paid alternatives for) did their marketing well (until they got hacked a few times that is) which gave them a moat and they still have some of it. Here is where large incubators give you some advantage; they use circlejerk to give you a lot of clients (their other companies and their clients) from the start.

Then there is a regulatory moat which is common in banking, healthcare etc; you need certificates in distinct regions etc. That makes it harder to compete without having a lot of money.

IP moats; maybe there are patents which competitors would need to work around. I'm against software patents however, they do exist and can hinder competitors to compete directly.

These are all moats which hinder competitors coming up. If a large company wants to compete with your software solution, they can copy it and go after your market. Usually they will look at your moat and just buy you out giving them the moat.

But yes, it is why VCs want you to grow as fast as possible at any cost; to 'take the market' so you have a moat in one or more of the above so in the end it's too much work to catch up and you'll be bought (exit).

Solely on technical merit, it is expected that AI will remove this moat completely over time, but we are not there yet. We don't know what software will look like at that time anyway; probably not really recognisable vs now.
https://archive.is/1tKYm

This is the store page a couple weeks after launch... It still says psn account required.
uv: An fast Python package installer and resolver, written in Rust
Yeah ok exactly? So why care about JTAG enabled?
> they've sold off most of that and moved into health tech.

..and are knowingly selling, among other things, highly defective CPAP devices.
Better-Prometheus: A better Prometheus library for PHP applications
A PHP library to work with Telegram UTF-16 styled text entities
There are also things that are still in the realm of the acceptable in a book but that would go too far in a movie.
Ask HN: In the day of AI what's best for coding tests/takeaway projects?
In the past I’ve set developers a small take home project/task.

However in the age of AI this can be easily completed with ChatGPT… what’s everyone’s go to for interview tasks?
I think the first diagram of the spaces is reasonable. I do imagine there's a whole lot more space around the included region that's still unexplored
I'm not fully understanding your comment. What do you think is happening or has happened to IMAP at Gmail?
Golang Programming Humble Bundle
How to recognize a psyop in three easy steps
You can answer the question yourself for any provider using this simple test: Can you legally buy access to it from inside the EU? If yes, they will suffer from the same problem as all other providers.
That’s just some guy that asserts stuff though. I mean, so am I to you, but fwiw I’ve never seen or heard of any non-hack PHP in the current codebase
There's a little more 'there' there in 'AI' (for which read generative AI in the current bubble; no other sort will tickle a VC's fancy appropriately) than there was in Our Lord And Saviour the Blockchain, but ultimately, for many applications, there's a lot of the same sort of magical thinking; "okay, this doesn't really work _now_, but surely it will soon, and it's of questionable utility, but it is imbued with the power of blockchain/LLMs, so don't question the Emperor's tailor."

It is IMO _totally_ unsurprising that the ex-crypto people are all over it.